2005-11-24 - Version 2.4.0a
- fixed a call to sql_build_array (wrong function used) in attach_mod/includes/functions_admin.php
this is producing a php error message within the user administration panel (editing user details)
- this version is a repackage, therefore the "a" at the end (nothing else changed, update path and everything else is the same)

2005-11-21 - Version 2.4.0
- using olympus' system of retrieving and storing values
- using function for sql escaping
- installer now checks for upload directory
- fixing multiple call to database in installer
- fixing sort_multi_array to correctly decide if sorting is based on numeric or string
- taking open basedir restriction into account if checking for image size
- making creation of temporary thumbnail file more unique if ftp upload is used (thanks to Douglas Hoffman)
- fixing viewing of no longer viewable/denied attachments for admins (alcaeus)
- display correct filename on download
- added optional language variables (Sync_topics, Sync_posts and Sync_thumbnails)

2005-07-16 - Version 2.3.14
- seperated pre-modified files from the Mod and made them downloadable as a seperate package
- updated pre-modified files to be compatible with the latest phpBB-Version
- fixed bug with umlauts in filenames
- updated create_thumbnails.php script to abide to the minimum thumbnail size - thanks to weightweenies
- fixed typo in routine for determining when to refresh the posting screen - thanks to Meithar
- invoke correct thumbnail display if storage path is outside of webroot

2005-05-10 - Version 2.3.13
- updated pre-modified files to be compatible with phpBB 2.0.15
- fixed serious issue with realnames. My thanks goes to CastleCops (specifically to Mere-Mortal and Paul) for discovering and reporting the issue
- catch empty files if set
- prevented generation of empty physical filenames if cryptic filenaming is not enabled
- changed the way get_var is working - thanks to AnthraX101 for noting the issue
- do not display upload limits if mod is disabled

2005-04-16 - Version 2.3.12
- updated pre-modified files to be compatible with phpBB 2.0.14
- added is_uploaded_file check to make sure only files really got uploaded gets into the filesystem
- re-added opening new page on attachment download
- fixed thumbnail erroring out on some occassions

- fixed directory traversal injection (high severity) - Paul Laudanski (AKA Zhen-Xjell) http://castlecops.com
With this an attacker could be able to add/remove/execute files outside of the upload directory

- fixed multiple file extensions vulnerability (high severity) - Jeremy Bae at STG Security, Inc.
Due to the handling of mod_mime on multiple extensions an attacker is able to upload arbitrary script files
to the web server.

2004-08-02 - Version 2.3.10
- fixed vulnerability in uacp.php (deleting attachments)
- fixed bug in attach_rules.php - wrong filesize display
- updated pre-edited files to be compatible with phpBB 2.0.10
- auth rules only checked for auth_attachments and auth_download
- dropped addons directory (let the creator more freedom to maintain his work)
- change thumbnail creation (new algorythm to calculate image sizes)
- real GD2 support, fixing some issues
- more small fixes here and there... mostly pointed out by users
- fixed default quota assignments
NOTE:
Users/Groups having no quota limit will be defaulted to the default quota limit set,
this means changing default quotas will automatically affect those users having no quota limit
as well as newly registered users (since they do not have a quota limit by default).

2002-10-13 - Version 2.3.3
- fixed bug: Single quotes within comments
- fixed bug: Could not update Download Counts within Attach CP
- fixed bug: Download opens new empty Window
- hopefully fixed: Windows Download Paths with Drives
- fixed bug: Not able to do more than one modification in Management Screen
- fixed bug: Some issues with <? tags, changed to <?php now
- fixed bug: potential issue in download.php preventing download at all
- speed improvements within nearly all non-admin pages, less queries, less load.
- fixed bug: css styles not present at some input fields
- added: Admin is able to define if the new Attachment Posting Control Panel should be displayed
- fixed bug: shadow attachments does no
- fixed bug: sql error on shadow attachments (only happened on resync)
- fixed bug: update_to_221.php exited
- fixed an issue with thumbnails (importent for puretec users)
- added two new scripts (check_lang_files.php and revar_filenames.php)
- fixed bug: German language file issues
- fixed bug: Filenames with single quotes
- if you press the Preview Button, the File gots submitted
- Filenames are now saved as Real Names

2002-09-06 - Version 2.3.2
- fixed bug: Fatal Error in Attachment Control Panel
- fixed bug: Could not update/delete Attachments in Attachment Control Panel
- fixed bug: Filesize Sort does not work in Attachment Control Panel
- fixed bug: After Topics were splitted no Attachments are displayed
- fixed bug: Prefix Bug in Updater
- fixed bug: Updater was not able to migrate more than 2000 Attachments
- fixed bug: Updater was confused on some circumstances, resulting in inconsistent migrations
- fixed bug: Sort Order in Posting Page and Viewtopic
- fixed bug: Refresh in PM's and little bugfixes on posting Attachments in PM's

- added feature: Sort Order is choosable by Admin in Management Screen
- added feature: imagick path support and display order choose
- added feature: Upload New Version of Attachments in Posting Screen

- added Template Caching support (Only tested with File based caching)
- Syncronise of Topics now complete, forgot one thing
- cleanups in posting Attachments
- added a Posting Attachments Control Panel to the Posting Page to let the Posting Page looks more clean.

2002-08-21 - Version 2.3.1
- fixed bugs.

2002-08-13 - Version 2.3.0
- Now the Attachment Mod is Extension Based
- German Formal Language added
- MsAccess Support added
- a very cool Updater. (I am very proud of it) - fully supports mysql, mssql and postgresql
- FTP Remote Upload supported (Thumbnail Creation not tested with this Feature)
- Thumbnail support added
- Comments editable from Control Panel
- Downloads editable from Control Panel
- Complete new Section 'Special Categories' added
- choose if you want to display images inlined
- define maximum Image Dimensions
- Image Link Dimensions definable (If this dimension is reached, the Image is displayed as a Link rather than inlined)
- Reduce of Queries and Server-Load
- some cleanups in template-files (For example, you can now mark all Shadow Attachments at once)
- vast improvement of speed in viewtopic.php.
- Attachment Topic Icon in Moderator Control Panel
- Test Settings in Management and Special Cats available
- own detection method for Image Sizes (if PHP fails, do it yourself. )
- Display in Topic Review
- Display in Post Preview
- Display in PM Preview
- special categories are multi-selectable.
- hopefully eliminated all download naming problems
- bugfixes for mssql and postgresql
- fixed flash dimensions detection (now do it yourself, if it can't be handled by PHP)
- some little bugfixes i don't remember anymore
- fixed: can't delete Extensions and Extension Groups
- fixed: Upload-Error because of wrong upload method determined.
- fixed: Warning in Administration Panel if Attachments are deleted.
- fixed: Problem with Pruning (exited with SQL-Error)
- fixed: Error after Disabling the Board
- fixed: Naming of Attachment begins with a minus, if Anonymous posted Attachments.
- i have forgotten the rest...

2002-06-08 - Version 2.2.3
- security fix: (able to attach not allowed files in a few circumstances)
- bug fixed: only board default language is displayed
- bug fixed: display of wrong error message in PM Attachments (the number of maximum allowed attachments)
- bug fixed: Filesizes are displayed wrong in Management Screen on some circumstances
- bug fixed: Missing Language Variables in Attachment Control Panel
- bug fixed: MSSQL-Schema was buggy
- bug fixed: some issues with MSSQL
- bug fixed: pagination error in Attachment Control Panel
- bug fixed: error in Shadow Attachments where post_id and privmsgs_id are not set
- bug fixed: Installation Instructions - Section: privmsgs.php - Only important for new installations
- german language file updated a little bit
- restructure of Shadow Attachments (should work now for Total Attachments greater 6000)
- improved the handling of Filesizes
If the Global Filesize is changed, the MIME Groups filesizes are changed too, if they were
not altered before. The handling is more logical now.
- Feature added: Admin is able to override the limitations set by the Mod

2002-03-27 - Version 2.1.1
- added the albanian language pack
- added a FAQ
- Split up the Languages to be seperate available
- Made a little html-page about this

2002-03-26
- made those category definitions available to clean install...
if you are upgrading and don't know what to add for flash, wma and rm files, drop me a pm or mail me.
- added category swf (flash files)

2002-03-24
- the admin has the ability to specify maximum filesizes to mime groups
- added download_mode (you can choose, if you want to present the 'ghost'-link or
the physical link. Now rm-files can attached correctly)
- added a category selector into Mime Groups
- inline image display is a category now and depends on that of course (inline image selector
in management deleted)
- category wma-files added (if category is assigned, wma-files can be streamed in posts)
- Now i can add special html-codes for mime groups (thanks to the category-thingy. )
- special upload images for mime groups now possible.
- added extra checking of upload dir (checks if it exists and if it's chmodded correctly)
- added a .htaccess file to the files-directory (thanks matthijs for the suggestion)

2002-03-03 - Version 2.0.9
- a small change in displaying attachments (viewtopic), now the display-order is from newest to oldest
( if you upgrade please execute update_to_209.php and delete it after execution )

2002-03-02
- added forbidden file-extensions pl, asp and cgi in upgrade-script (since v2.0.7 there are in db-basic)
- filesize and attachment post time now stored in db (speed increase)
- added attachment quota feature
- added a search-feature to the Attachment Control Panel

2002-02-27 - Version 2.0.8
- fixed a very bad bug who overrides the Authentication (thanks to SHS` who have seen it at first. )
- Changed the Database shema a little bit
- Introduced Basic and Schema-files for postgreSQL (NOT TESTED)
- The Language Variable {L_POSTED_ATTACHMENTS} is now available in viewtopic_attach_body.tpl
- Introduced Language Variables for hardcoded Sizes in Templates (Bytes, KB, MB)
- Added a little Template How-To (attach_mod_tpl_doc.html)

2002-02-23 - Version 2.0.7
- changed the use of authentication
(now those haven't the permission to the update-command in mysql can install and use this mod)

( if you upgrade please execute update_to_207.php and delete it after execution )

2002-02-19
- changed mod_table_inst.php and mod_table_uninst.php to allow installation even if errors occured
- adjusted code to fit the newest changes in posting.php (now only have to add 3 instead of 6 lines)
- added a "preview" of the attachment control panel (just new files, no changes to existing ones)

2002-02-04 - Version 2.0.5
- fixed bug with filenames
- filenames are no longer part of the stored file
- test another download-mechanism to present only the filename (need feedback on this)
if someone experience problems in downloading files, please feel free to contact me

2002-02-03
- added "multiple attachments"-feature
- max number of attachments in one post definable
- comments are now editable (in posts only, edit comments in admin-panel will be added soon)

You cannot post new topics in this forumYou cannot reply to topics in this forumYou cannot edit your posts in this forumYou cannot delete your posts in this forumYou cannot vote in polls in this forumYou cannot attach files in this forumYou can download files in this forum